All posts tagged "Cobalt Strike"

• 

  4.3K

  Malware

  Researchers Detail Multistage Attack Hijacking Systems with SSLoad, Cobalt Strike

  Cybersecurity researchers have discovered an ongoing attack campaign that’s leveraging phishing emails to deliver malware called SSLoad. The campaign, codenamed FROZEN#SHADOW by...

• 

  1.1K

  Malware

  TeamCity Flaw Leads to Surge in Ransomware, Cryptomining, and RAT Attacks

  Multiple threat actors are exploiting the recently disclosed security flaws in JetBrains TeamCity software to deploy ransomware, cryptocurrency miners, Cobalt Strike beacons,...

• 

  2.7K

  Vulnerabilities

  Malicious Ads Targeting Chinese Users with Fake Notepad++ and VNote Installers

  Chinese users looking for legitimate software such as Notepad++ and VNote on search engines like Baidu are being targeted with malicious ads...

• 

  4.3K

  Vulnerabilities

  SystemBC Malware’s C2 Server Analysis Exposes Payload Delivery Tricks

  Cybersecurity researchers have shed light on the command-and-control (C2) server workings of a known malware family called SystemBC. “SystemBC can be purchased...

• 

  2.0K

  Malware

  Alert: Water Curupira Hackers Actively Distributing PikaBot Loader Malware

  A threat actor called Water Curupira has been observed actively distributing the PikaBot loader malware as part of spam campaigns in 2023....

• 

  2.3K

  Vulnerabilities

  New Hacker Group ‘GambleForce’ Tageting APAC Firms Using SQL Injection Attacks

  A previously unknown hacker outfit called GambleForce has been attributed to a series of SQL injection attacks against companies primarily in the...

• 

  614

  Cyber Attack

  Threat Actors Targeting Microsoft SQL Servers to Deploy FreeWorld Ransomware

  Threat actors are exploiting poorly secured Microsoft SQL (MS SQL) servers to deliver Cobalt Strike and a ransomware strain called FreeWorld. Cybersecurity...

• 

  3.5K

  Malware

  China-Linked Bronze Starlight Group Targeting Gambling Sector with Cobalt Strike Beacons

  An ongoing cyber attack campaign originating from China is targeting the Southeast Asian gambling sector to deploy Cobalt Strike beacons on compromised...

• 

  4.8K

  Vulnerabilities

  New Ransomware Strain ‘CACTUS’ Exploits VPN Flaws to Infiltrate Networks

  Cybersecurity researchers have shed light on a new ransomware strain called CACTUS that has been found to leverage known flaws in VPN...

• 

  355

  Vulnerabilities

  Fortra Sheds Light on GoAnywhere MFT Zero-Day Exploit Used in Ransomware Attacks

  Fortra, the company behind Cobalt Strike, shed light on a zero-day remote code execution (RCE) vulnerability in its GoAnywhere MFT tool that...

• 

  3.0K

  Malware

  Chinese and Russian Hackers Using SILKLOADER Malware to Evade Detection

  Threat activity clusters affiliated with the Chinese and Russian cybercriminal ecosystems have been observed using a new piece of malware that’s designed...

• 

  2.2K

  Malware

  Gootkit Malware Adopts New Tactics to Attack Healthcare and Finance Firms

  The Gootkit malware is prominently going after healthcare and finance organizations in the U.S., U.K., and Australia, according to new findings from...

• 

  2.6K

  Malware

  Gootkit Malware Continues to Evolve with New Components and Obfuscations

  The threat actors associated with the Gootkit malware have made “notable changes” to their toolset, adding new components and obfuscations to their...

• 

  4.3K

  Vulnerabilities

  Critical RCE Vulnerability Discovered in Popular Cobalt Strike Hacking Software

  HelpSystems, the company behind the Cobalt Strike software platform, has released an out-of-band security update to address a remote code execution vulnerability...

• 

  3.1K

  Malware

  Black Basta Ransomware Hackers Infiltrate Networks via Qakbot to Deploy Brute Ratel C4

  The threat actors behind the Black Basta ransomware family have been observed using the Qakbot trojan to deploy the Brute Ratel C4...

• 

  3.7K

  Vulnerabilities

  New Malware Campaign Targeting Job Seekers with Cobalt Strike Beacons

  A social engineering campaign leveraging job-themed lures is weaponizing a years-old remote code execution flaw in Microsoft Office to deploy Cobalt Strike...

• 

  1.0K

  Malware

  Cybercrime Groups Increasingly Adopting Sliver Command-and-Control Framework

  Nation-state threat actors are increasingly adopting and integrating the Sliver command-and-control (C2) framework in their intrusion campaigns as a replacement for Cobalt...

• 

  5.1K

  Malware

  Researchers Detail Evasive DarkTortilla Crypter Used to Deliver Malware

  A .NET-based evasive crypter named DarkTortilla has been used by threat actors to distribute a broad array of commodity malware as well...

• 

  4.3K

  Malware

  Chinese Hackers Using New Manjusaka Hacking Framework Similar to Cobalt Strike

  Researchers have disclosed a new offensive framework referred to as Manjusaka that they call is a “Chinese sibling of Sliver and Cobalt...

• 

  3.3K

  Malware

  Hackers Abusing BRc4 Red Team Penetration Tool in Attacks to Evade Detection

  Malicious actors have been observed abusing legitimate adversary simulation software in their attacks in an attempt to stay under the radar and...

• 

  4.5K

  Malware

  Researchers Warn of ‘Matanbuchus’ Malware Campaign Dropping Cobalt Strike Beacons

  A malware-as-a-service (Maas) dubbed Matanbuchus has been observed spreading through phishing campaigns, ultimately dropping the Cobalt Strike post-exploitation framework on compromised machines....